I've been experiencing multiple blue screens for the past two weeks since I upgraded to the latest Zone Alarm. The BSOD had no usable information displayed, but analysis of the minidump points directly at the Zone Alarm vsdatant.sys driver.

Here's the debugger output...


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini112309-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: symsrv*symsrv.dll*C:\SYMBOLCACHE*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18082.x86fre.vistasp2_gdr.090803-2339
Machine Name:
Kernel base = 0x82012000 PsLoadedModuleList = 0x82129c70
Debug session time: Sun Nov 22 13:26:21.100 2009 (GMT-8)
System Uptime: 0 days 15:40:13.009
Loading Kernel Symbols
.................................................. .............
.................................................. ..............
..............................................
Loading User Symbols
Loading unloaded module list
...............
Unable to load image vsdatant.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 0, {0, 0, 0, 0}


ERROR: Could Not Find Target OS Version. Please Update GetFunctionForOSVer to include target OS Version

Probably caused by : vsdatant.sys ( vsdatant+55c0e )

Followup: MachineOwner
---------

1: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Unknown bugcheck code (0)
Unknown bugcheck description
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


ERROR: Could Not Find Target OS Version. Please Update GetFunctionForOSVer to include target OS Version


PROCESS_NAME: WerFault.exe

FAULTING_IP:
nt!KeBugCheck+14
820dfadf 5d pop ebp

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 820dfadf (nt!KeBugCheck+0x00000014)
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000001
NumberParameters: 0

ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION} Breakpoint A breakpoint has been reached.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x0

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8ed38c0e to 820dfadf

STACK_TEXT:
b4be1bf0 8ed38c0e 00000000 00000c8c c0000008 nt!KeBugCheck+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
b4be1c0c 8ed23d69 00000148 3a6a4cd5 0000012c vsdatant+0x55c0e
b4be1d40 8205cc7a 0000012c 00fd624c ffffffff vsdatant+0x40d69
b4be1d40 77b25e74 0000012c 00fd624c ffffffff nt!KiFastCallEntry+0x12a
000bca24 00000000 00000000 00000000 00000000 0x77b25e74


STACK_COMMAND: kb

FOLLOWUP_IP:
vsdatant+55c0e
8ed38c0e ?? ???

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: vsdatant+55c0e

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: vsdatant

IMAGE_NAME: vsdatant.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ad981ac

FAILURE_BUCKET_ID: 0x0_vsdatant+55c0e

BUCKET_ID: 0x0_vsdatant+55c0e

Followup: MachineOwner
---------

1: kd> !analyze -show
Unknown bugcheck code (0)
Unknown bugcheck description
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
1: kd> lm n t
start end module name
80608000 8060f000 kdcom kdcom.dll Fri Apr 10 23:25:29 2009 (49E037D9)
8060f000 8067f000 mcupdate mcupdate.dll Fri Apr 10 23:23:19 2009 (49E03757)
8067f000 80690000 PSHED PSHED.dll Fri Apr 10 23:25:32 2009 (49E037DC)
80690000 80698000 BOOTVID BOOTVID.dll Fri Jan 18 23:27:15 2008 (4791A653)
80698000 806d9000 CLFS CLFS.SYS Fri Apr 10 21:13:51 2009 (49E018FF)
806d9000 807b9000 CI CI.dll Fri Apr 10 23:25:22 2009 (49E037D2)
807b9000 807c1000 msisadrv msisadrv.sys Fri Jan 18 21:32:51 2008 (47918B83)
807c1000 807e8000 pci pci.sys Fri Apr 10 21:19:16 2009 (49E01A44)
807e8000 807f7000 partmgr partmgr.sys Fri Apr 10 21:39:19 2009 (49E01EF7)
807f7000 807f9900 compbatt compbatt.sys Fri Jan 18 21:32:47 2008 (47918B7F)
82012000 823cb000 nt ntkrpamp.exe Tue Aug 04 02:26:11 2009 (4A77FEB3)
823cb000 823fe000 hal halmacpi.dll Fri Apr 10 21:13:13 2009 (49E018D9)
82600000 8267c000 Wdf01000 Wdf01000.sys Fri Jan 18 21:52:21 2008 (47919015)
8267c000 82689000 WDFLDR WDFLDR.SYS Fri Jan 18 21:52:19 2008 (47919013)
82689000 82789000 spgp spgp.sys Wed Mar 05 16:32:57 2008 (47CF3BB9)
82789000 82792000 WMILIB WMILIB.SYS Fri Jan 18 21:53:08 2008 (47919044)
82792000 827b8000 SCSIPORT SCSIPORT.SYS Fri Jan 18 21:49:44 2008 (47918F78)
827b8000 827fe000 acpi acpi.sys Fri Apr 10 21:19:03 2009 (49E01A37)
87e00000 87e0a000 BATTC BATTC.SYS Fri Jan 18 21:32:45 2008 (47918B7D)
87e0a000 87e19000 volmgr volmgr.sys Fri Jan 18 21:49:51 2008 (47918F7F)
87e19000 87e63000 volmgrx volmgrx.sys Fri Apr 10 21:39:25 2009 (49E01EFD)
87e63000 87e6a000 intelide intelide.sys Fri Jan 18 21:49:42 2008 (47918F76)
87e6a000 87e78000 PCIIDEX PCIIDEX.SYS Fri Apr 10 21:39:09 2009 (49E01EED)
87e78000 87e88000 mountmgr mountmgr.sys Fri Jan 18 21:49:13 2008 (47918F59)
87e88000 87e90000 atapi atapi.sys Fri Apr 10 21:39:09 2009 (49E01EED)
87e90000 87eae000 ataport ataport.SYS Fri Apr 10 21:39:10 2009 (49E01EEE)
87eae000 87eb8000 msahci msahci.sys Fri Apr 10 21:39:11 2009 (49E01EEF)
87eb8000 87eea000 fltmgr fltmgr.sys Fri Apr 10 21:13:59 2009 (49E01907)
87eea000 87efa000 fileinfo fileinfo.sys Fri Jan 18 21:34:27 2008 (47918BE3)
87efa000 87f08080 Lbd Lbd.sys Mon Mar 02 06:02:30 2009 (49ABE6F6)
87f09000 87f7a000 ksecdd ksecdd.sys Mon Jun 15 05:48:53 2009 (4A364335)
87f7a000 87fcb000 rixdptsk rixdptsk.sys Tue Nov 14 17:35:19 2006 (455A6ED7)
87fcb000 87ffa100 SynTP SynTP.sys Thu Mar 27 18:14:58 2008 (47EC4692)
8800f000 8811a000 ndis ndis.sys Fri Apr 10 21:45:52 2009 (49E02080)
8811a000 8811b000 msrpc msrpc.sys unavailable (00000000)
88145000 88180000 NETIO NETIO.SYS Fri Apr 10 21:46:21 2009 (49E0209D)
88180000 8819a000 sdbus sdbus.sys Fri Apr 10 21:19:14 2009 (49E01A42)

...more to follow

-DK